Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The flag --envoy-admin-access-enable-ipv6=true has no effect on envoy sidecar containers #787

Open
jgaynon opened this issue Sep 13, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@jgaynon
Copy link

jgaynon commented Sep 13, 2024

Describe the bug
Setting the flag --envoy-admin-access-enable-ipv6=true in the controller deployment config should set the ENVOY_ADMIN_ACCESS_ENABLE_IPV6 env var to true for all envoy sidecar containers. It does not, and the env var is always set to false.

Steps to reproduce
Set the flag --envoy-admin-access-enable-ipv6=true in the appmesh controller deployment config. Create a pod with an envoy sidecar container. ENVOY_ADMIN_ACCESS_ENABLE_IPV6 will still be set to false in the sidecar's pod config.

Expected outcome
ENVOY_ADMIN_ACCESS_ENABLE_IPV6 should be set to true in the sidecar's pod config, and the admin endpoint should accept IPv6 connections.

Environment

  • App Mesh controller version: v1.13.1
  • Envoy version: v1.29.6.0-prod
  • Are you using any integrations? X-ray, Jaeger etc. If so versions?: No.
  • Kubernetes version: v1.28
  • Using EKS (yes/no), if so version?: Yes, v1.28

Additional Context:
This currently makes it impossible for me to use the appmesh controller with Bottlerocket nodes as localhost resolves to IPv6, so the envoy pod readiness probe fails to connect.

@jgaynon jgaynon added the bug Something isn't working label Sep 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant